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(57) ABSTRACT 

A system for restricting use of a vehicle by a selected vehicle 
operator to permitted time intervals and permitted vehicle 
travel corridors. If a driver is seated behind the driver's 
wheel, the system requires that the driver provide one or 
more samples of an ident indicium, such as a fingerprint, 
facial scan, retinal scan, voice sample or blood sample 
analysis, to identify the driver, or of a personal identification 
indicium contained on a token or card, or of personal 
information entered using a data entry device (e.g., keypad). 
When this indicium is satisfactorily presented and analyzed, 
the system allows operation of the vehicle (including 
selected vehicle accessories) but further determines (i) 
whether the present time and/or accumulated vehicle opera- 
tion time and/or mileage is within a permitted time interval 
or accumulated time and/or mileage range and (ii) whether 
the vehicle present location and/or speed are within permit- 
ted ranges corresponding to the permitted time interval. If 
either condition (i) or (ii) is not met, vehicle operation is 
temporarily disabled, or a coded alarm signal is transmitted, 
or other appropriate control actions are taken. Alternatively, 
operation of a vehicle is restricted to one or more permitted 
location and/or velocity ranges and to one or more permitted 
time intervals or accumulated operation time and/or mileage 
ranges. Vehicle location determination (LD) can be imple- 
mented using signals from GPS, GLONASS, LEO, LORAN 
or similar LD systems. A permitted travel region and/or a 
permitted time interval can be changed remotely, by trans- 
mission of a change or reprogramming signal, or can be 
changed at the LD system carried on the vehicle. 

39 Claims, 9 Drawing Sheets 
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VEHICLE USE CONTROL 
FIELD OF THE INVENTION 

This invention relates to imposition or restrictions on or 
control of use, or inappropriate use, of a vehicle by a vehicle 
operator, in a manner mat minimizes the possibility of 
evasion by a (restricted) operator. 

BACKGROUND OF THE INVENTION 

Certain vehicle operators ("restricted operators" or 
"ROs") have their vehicle use privileges restricted from time 
to time. These vehicle use restrictions may arise because of 
one or more recent convictions of the operator for driving 
under the influence of alcohol or drugs, because of recent 
physical, mental or emotional impairment or the advanced 
age of the operator, or because of other similar reasons. 
Other restrictions may be applied to any driver of a vehicle 
that transports hazardous materials or that school children or 
groups of persons with special health or safety problems. 
Under appropriate circumstances, a court or other regulatory 
agency will often allow the restricted operator to use his/her 
vehicle only for transportation between the driver's resi- 
dence and the driver's place of work, physician/pharmacy 
office or similar destination, and only in restricted time 
intervals. One problem here is how to monitor the restricted 
operator's use of the vehicle to confirm that the vehicle is 
being used only within a permitted corridor and/or only 
within a permitted time interval, when used by that person. 

In other applications, access to a vehicle may be restricted 
to a limited set of vehicle operators. Use of a personalized 
and unspoofable method of providing access, which goes 
beyond mere possession of an ignition key, may be desir- 
able. For example, limiting access to a specified vehicle in 
a fleet of vehicles may be desired, such as access to a 
particular rental vehicle by an identified person who has 
rented that vehicle. 

Several workers have disclosed methods for tracking the 
location of a person as that person moves around within a 
confinement region. One solution of the site confinee track- 
ing problem contemplated by some of these previous work- 
ers is to bind a GPS antenna/receiver and a cellular or other 
signal transmitter to the site confinee's body (1) to confine 
the site confinee to the confinement site during normal times 
by GPS-assisted location monitoring, and (2) to reprogram 
the boundary of the confinement site (stored in memory) to 
include the designated site and a narrow corridor or path 
between the confinement site and the designated site, within 
a selected time interval, to allow the site confinee to move 
to the designated site and back to the confinement site, again 
using GPS signals to monitor the confinee *s present loca- 
tion. 

This approach, although straightforward, does not by 
itself provide tracking of vehicle location (only) during the 
times the restricted operator uses the vehicle and does not 
prevent the restricted operator from spoofing the system to 
cause the system to conclude that the vehicle is within a 
permitted corridor, when in fact the vehicle is elsewhere. 
Further, it may be desired to restrict use of a vehicle to a 
selected region, whether or not the vehicle is operated by an 
RO. 

Receipt and analysis of a biometric sample supplied by a 
person to verify the asserted identity of that person is 
disclosed in several U.S. Patents. These patents usually 
contemplate determination of that person's identity once and 
at a fixed place of receipt of the sample. 

What is needed is an integrated location determination 
system and control system with anti-spoofing capability, for 
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automatically distinguishing between a restricted operator, 
seated behind the driver's wheel of a vehicle, and some other 
driver, for determining the present vehicle location, and for 
comparing the present vehicle location with a permitted 

5 vehicle travel corridor and with a permitted time interval for 
vehicle travel Preferably, the permitted time intervals) and 
permitted vehicle corridors) should be flexible and should 
be capable of being changed by an authorized monitoring 
agency or person. Preferably, the monitoring system should 

10 include anti-spoofing mechanisms that make it difficult, if 
not impossible, for the restricted operator to operate a 
designated vehicle, or any vehicle, without activating a 
vehicle location reporting unit that is carried by the vehicle. 
In another mode of operation, the system should preferably 

15 allow operation of the vehicle to be restricted to a selected 
region, irrespective of who operates the vehicle. 

SUMMARY OF THE INVENTION 

These needs are met by the invention, which provides a 
20 system, method and associated apparatus that monitors and 
discretionarily reports the location of a designated vehicle, 
whenever the restricted operator ("RO") is seated behind the 
driver's wheel of and operates this vehicle. In one 
embodiment, each person who is seated behind the driver's 
25 wheel must present a sample of a biometric indicium 
(thumbprint, fingerprint, handprint, facial scan, retinal scan, 
blood sample scan, etc.), which is compared with corre- 
sponding biometric indicia stored in a database. In some 
embodiments, the vehicle operator is required to present 
30 another sample of the biometric indicium at unpredictable 
times while the vehicle is operated. Alternatively, a token 
with encoded information concerning the driver must be 
presented. 

35 From a comparison of the stored driver identification 
indicia and the biometric sample or token presented by the 
vehicle operator, the control system assigns the driver to one 
of five categories: (1) a restricted operator (RO); (2) an 
identified and authorized operator who is not an RO; (3) an 

40 unidentified operator; (4) an operator whose identification 
indicium (presented) is too degraded to permit determination 
of the operator's identity; and (5) an operator who has failed 
to present a sample of the requested identification indicium. 
Different driving restrictions are imposed, depending upon 

45 the category to which the operator belongs. 

If the operator is determined to be an RO, the location 
determination (LD) system determines the present time and 
present vehicle location and/or speed and compares these 
with the permitted time intervals and permitted travel 

50 corridors) and speeds for travel. If a mismatch is found, one 
or more of 12 Control Actions can be taken, or some other 
restriction can be imposed that is consistent with the vehicle 
use restrictions imposed on the RO. 

Where the person driving the vehicle is an unrestricted 

55 operator but operation of the vehicle is restricted to a 
selected time interval or geographic region, or the vehicle 
speed or another attribute is restricted, an LD system 
attached to or carried on or in the vehicle compares the 
present time, vehicle present location or speed with the 

60 permitted time interval, region or speed range. The vehicle 
can be brought to a graceful stop if the present time or 
vehicle location is not within a permitted time interval or 
region; or the vehicle speed can be promptly brought back 
to its permitted range. Alternatively, the LD system com- 

65 pares the vehicle speed or other vehicle attribute with a 
permitted range for that attribute; operation of the vehicle is 
restricted so that the vehicle attribute is always within the 
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permitted range. If the LD system does not receive signals 
sufficient to determine vehicle location or speed, one or 
more of the 12 Control Actions, set forth in the following, 
can be taken by the system. 

5 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a schematic view illustrating use of the invention 
in two embodiments, using satellite -based or ground -based 
LD signal sources to provide LD signals. JQ 

FIGS. 2A/2B, 3, 4A/4B and 5 are flow charts illustrating 
embodiments of the invention. 

FIG. 6 is a schematic view of apparatus suitable for 
practicing the invention. 

FIG. 7 illustrates a vehicle use system according to the 15 
invention. 

DESCRIPTION OF BEST MODES OF THE 
INVENTION 

20 

FIG. 1 illustrates practice of the invention in one embodi- 
ment. A restricted operator ("RO") 11, whose use of a 
vehicle 13 is restricted to one or more permitted corridors or 
paths 15 and is restricted to one or more selected time 
intervals, is shown operating the vehicle within the permit- 25 
ted corridor 13. The RO*s use of the vehicle 13 may be 
restricted because: (1) the RO has (recently) been convicted 
of operation of a vehicle under the influence of alcohol 
and/or of a controlled substance or drug (a DUI offense); (2) 
the RO has diminished physical, mental or emotional capac- 3Q 
ity to operate a vehicle, due to illness, epilepsy or other 
similar infirmity; (3) the RO is of an advanced age and does 
not have the full set of skills or requisite reaction times to 
operate a vehicle, under many conditions that might be 
encountered on the road; (4) the RO is a very young driver 35 
who has not yet acquired the requisite driving and reaction 
skills to be allowed to operate the vehicle without some 
restrictions; or (5) the RO suffers from some other infirmity 
that regularly or occasionally renders the RO unable to fully 
control and operate a vehicle. Under such circumstances, an ^ 
RO may be allowed to operate a selected vehicle within a 
permitted travel corridor 15 (1) to commute to and from 
work during restricted workday hours, (2) to travel between 
the RO's home site 16 and a medical practitioner's office, a 
pharmacy, a food store or similar essential facility 17 during 45 
restricted hours each day or (3) for similar essential purposes 
during restricted hours. 

A location determination (LD) module 19, that is part of 
an LD system, such as GPS, GLONASS, LEO, Iridium or 
LORAN, including an LD signal antenna 21 and an LD 50 
signal receiver/processor ("receiver") 23 connected to the 
antenna 21, is located on the vehicle 13. When activated, the 
LD module 19 determines the present location, present 
speed (optional) and observation time (optional) of the 
antenna 21, and thus of the vehicle 13, in a manner well 55 
known in the art. The LD antenna 21 receives LD signals 
from two or more LD signal sources 25A, 25B, 25C, 25D 
that may be transmitting satellites or transmitting ground- 
based towers, or may be some other suitable source of LD 
signals. The present location and the present observation 60 
time for the vehicle are determined from receipt of the LD 
signals by methods that are well known in the art. A hybrid 
LD system is discussed in the following. 

From time to time, the LD system may lose one or more 
of the LD signals and may be unable to determine the 65 
present location of the vehicle. In another embodiment of the 
invention, a vehicle odometer communicates with the LD 
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system to provide a first hybrid location determination 
(HLD) system for determination of accumulated mileage 
traveled by the vehicle. Loss of one or more LD signals may 
be gradual, as when the vehicle travels through an urban 
canyon or the signals are naturally interfered with by struc- 
tures (trees, hills, canyons, buildings, etc.) that are present 
locally. Loss of signals may also occur suddenly, due to 
natural causes or to intentional interference. In either 
instance, one or more of 12 Control Actions may be 
imposed, either as soon as the loss of signals occurs or 
whenever the signals do not return, after the vehicle has 
traveled a selected time interval or has traveled a selected 
accumulated distance, measured from the time the LD 
signals are first lost. 

In another embodiment, a second HLD system includes a 
conventional LD system that works cooperatively with an 
inertial navigation system (INS) or dead reckoning system to 
estimate vehicle location, speed and/or mileage traveled. An 
example of an operating dead reckoning system is the 
Trimble Navigation Placer GPS 450/455 vehicle LD system 
(Sunnyvale, Calif.) that receives and uses GPS signals and 
(optionally) differential GPS signals and/or dead reckoning 
information, determines and reports vehicle location and 
selected status parameters to a base station, and takes one or 
more selected control actions (unlock/lock vehicle doors, 
kill the ignition, sound vehicle alarm, etc.) in response to 
receipt of signals from the base station. 

The INS functions at all times, and its data are regularly 
updated, using the LD information when such information is 
presently available. When the LD information is lost or 
corrupted, the last update INS location/speed information 
plus the INS information accumulated since the last INS 
update, are used to estimate the present location and/or 
speed and/or accumulated mileage, using dead reckoning 
and other suitable techniques that are well known in the art. 
An example of use of cooperative use of GPS and INS 
signals for LD is found in U.S. Pat. No. 5,193,064, issued to 
Maki, incorporated by reference herein. 

One method for identifying the RO or another driver uses 
an RO thumbprint, fingerprint, handprint, partial or full 
facial image, retina, iris, voice sample, cursive signature, 
blood vein pattern, blood sample or other suitable biometric 
indicium for prompt analysis and comparison with a data- 
base of stored biometric indicia. At an unpredictable 
sequence of times when the vehicle is operating, with a 
required response time interval of 1-10 seconds in length 
and at separation times of the order of a 60-600 seconds, the 
driver of the vehicle is commanded by an audio or visual 
interface within the vehicle to provide the driver's desig- 
nated biometric indicium on a small plate or other biometric 
indicium receiving and analysis mechanism ("BIRAM") 27 
and vehicle control system 29. The BIRAM 27 is preferably 
positioned at a location that is difficult to reach by anyone 
except a person seated behind the driver's wheel. For 
example, in a vehicle in which the driver's wheel is located 
on the left (on the right), the vehicle driver can be com- 
manded to provide a thumbprint, fingerprint or handprint 
from the driver's right hand (left hand) on a plate located on 
the left (right) adjacent to the driver's wheel. This arrange- 
ment makes it very difficult for anyone but the vehicle driver 
to provide the required biometric indicium, in the short 
response time interval provided. 

Alternatively, a scan and analysis of all or a portion of the 
driver's facial image, retina or iris may be performed at each 
of a sequence of unpredictable times while the vehicle 
engine is activated. This approach may require use of a 
system that can distinguish between a "mask" or other 



06/09/2004, EAST version: 1.4.1 



US 6,225,890 Bl 

5 6 

artificial face and a genuine face, perhaps by also performing If the biometric indicium is that of another identified 

a thermal scan of the portion of the surface of the face driver (not an RO), other restrictions on freedom of choice 

presented for comparison. Alternatively, the driver may be are optionally imposed on this driver, such as the Control 

required to present a hand, arm or other appendage for a Actions number (2), (3), (4), (5), (7), (9), (10), (11) and (12). 

non-invasive blood or blood vein pattern scan at each of a 5 If me biometric indicium corresponds to an unidentified 

sequence of unpredictable times while the vehicle engine is drf the s optionally takes at least one of the 12 

activated. Alternatively, the driver may be required to speak Control Actions 

a selected collection of words or phrases into a voice A , . * , , . . , «. ™ 

analysis module that analyzes and compares the words or Alternatively, each identified driver, including an RO, 

phrases with a database of already-analyzed words or ma y be assigned (1) an individualized maximum vehicle 

phrases and attempts to match the new entry with an extant speei a governor with a variable maximum speed 

entry for an already-identified vehicle operator. installed on the vehicle and/or (2) individualized maximum 

The BIRAM 27 receives a biometric indicium, presumed accumulated vehicle mileage and/or (3) an individualized 

to be that of the vehicle driver, performs one or more maximum accumulated vehicle operation time and/or (4) 

suitable tests on the indicium, and compares the indicium one or more individualized time intervals for vehicle opera- 

with indicia stored in a database to determine if the indicium 15 tion. An unidentified driver may also be assigned one or 

belongs to an identified RO, or to another identified driver. more default limitations, drawn from the immediately pre- 

If the biometric indicium is that of the RO, the system: (1) ceding list, for vehicle operation. 

determines if the present time is within at least one of the j t ^ possible that the biometric indicium, such as a 

permitted time intervals during which the RO is permitted to thumbprint, fingerprint, handprint, facial scan, retinal scan, 

operate the vehicle; and/or (2) determines if the vehicle 20 yoice g k analysiSj blood vein scan> blood sample scan> 

present location and/or speed as determined by the LD etc ^ { presented but is not legible or cannot be 

antenna and LD receiver earned on the vehicle, is within a inte ted or anal d> ^ mi hl ^ where the rel . 

permitted travel region and speed range corresponding to a .JLla u j <* * u j ■ 

*** j i* • * i *i_ . • i j *L * *• no evant thumb, finger, hand, face or eye to be scanned is 

permitted time interval that includes the present time. U.S. , , \. . c . « 

Pat. No. 5,485,161, issued to Vaughn, incorporated by 25 cracked or otherwise disfigured, or where a voice to be 

referenceherein,disclosesuseofanLDsystemtodetermine ^ 15 dlstorted by illness or the like To provide for 

and display a maximum vehicle velocity allowed for the such contingencies, each authorized and identified vehicle 

present vehicle location. driver may be required to enter a sample of each of two or 

If one or both of the two preceding tests is answered in the more qualitatively different biometric indicia from different 

negative, the system optionally takes at least one of 12 30 of the bodv > for example, a thumbprint and a blood 

Control Actions: (1) the system (temporarily) disables the s^ple reading. If the first biometric indicium presented by 

vehicle at a selected time so that the vehicle no longer tbe vehicle driver (at the present time) is not legible or 

operates, through fuel cutoff, air brake disablement or some readable, the system requires the driver to enter the second 

other similar measure; (2) the system (temporarily) disables biometric indicium for comparison against the stored ver- 

use of selected vehicle accessories, such as a winch, pump, sion of this second indicium. 

cargo lift, cargo lock, dump mechanism, emergency fights or 35 if the vehicle driver fails to provide a legible/ 

flashers, or door locks; (3) the system reduces the vehicle interrogatable biometric indicium, after a sequence of N 

speed to a selected speed range, using a vehicle "governor" consecutive commands (N a selected integer^ 1), the system 

or some other suitable approach; (4) the system forces the optionally takes at least one of the 12 Control Actions, 

vehicle to operate only in selected lower gears, such as first . . , , . ., ...... 

and second; (5) the system turns on at least one of the lights, 40 vehicle driver provides a biometnc indicium upon 
exterior flashers and horn continuously or periodically; (6) receiving a command to do so, and the indicium is found not 
the system activates an on-board alarm the is visually or t0 match me R0 s indicium, the vehicle driver is optionally 
audibly perceptible to a person outside the vehicle; (7) the permitted to continue to operate the vehicle but must con- 
system transmits an alarm (optionally silent) to a selected tinue to respond to the sequence of commands to provide a 
facility that is spaced apart from the vehicle; (8) the system 45 biometric indicium from time to time, 
activates an air bag or other disabling device on the driver's Each new, authorized vehicle driver will enter one or 
side of the vehicle; (9) the system allows the vehicle to more samples of chosen biometric indicia for that person 
operate for at most a selected cumulative time interval; (10) into the system, for use in subsequent driver identification, 
the system allows the vehicle to operate only within one or Preferably, an authorized vehicle driver, including an RO, 
more selected time intervals; (11) the system allows the 50 will periodically re-enter a sample of that person's chosen 
vehicle to operate for at most a selected cumulative vehicle biometric indicia into the system, to compensate for the 
mileage; and (12) the system takes no action at that time but tendency of a biometric indicium to change with the passage 
optionally logs the activity and allows the driver to operate of time; re-entry might be required at intervals of 6-24 
the vehicle without restriction for a selected time interval. months. 

Optionally, the controller connects to a display system that 55 In addition to, or instead of, presentation of a biometric 

audibly announces or visually displays an announcement indicium, the vehicle may require insertion or presentation 

that a violation has occurred and/or that the vehicle will of a token or smart card (referred to collectively as a "token" 

become disabled within a selected time interval (e.g., 30-60 j here) that corresponds to that vehicle, in order for the vehicle 

sec) and/or that the driver should steer the vehicle off the I to be activated or "started." The token may have built into 

road, if possible, before disablement occurs. 60 it a circuit or pre-programmed information in a storage 

In an extreme situation, the vehicle may be provided with medium that imposes selected restrictions on operation of 

an airbag, or other driver disablement device, on the driver's the vehicle and/or that identifies the token holder. For 

side that is automatically activated if the RO attempts to example, the token may specify that the vehicle can be 

operate the vehicle outside the permitted time interval or operated only within a selected geographic region, only 

outside the permitted travel corridor. However, this 65 within a selected vehicle speed range, only for a selected 

approach does not provide a permanent restriction on maximum accumulated mileage, only with one or more 

vehicle use. selected time intervals, or only for a selected maximum 
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vehicle operation time. The token may also be specific for ident indicium presented by driver; and (5) ident indicium 

the person who presents the token and may require presen- not presented. The control system determines the present 

tation of one or more biometric indicia at times during vehicle location, vehicle speed (optional) and time, in step 

operation of the vehicle, as discussed in the preceding, to 39. 

confirm the identity of the token holder. Preferably, at least 5 in step 41, the control system determines if the driver has 

part of the information contained on the token is encoded or status no. 1. If the answer to the question in step 41 is "yes", 

encrypted, and the token-accepting system is programmed to the system determines, in step 43, (i) whether the vehicle 

decrypt or decode and use the token information, in order to location and/or speed are within permitted ranges for the RO 

minimize or eliminate the possibility that an unauthorized and (ii) whether the present time and/or accumulated time or 

person could read and modify the token to permit unin- 10 mileage are within permitted ranges for the RO. If the 

tended operation of the vehicle. The token may rely upon answers to question (i) and to question (ii) in step 43 are both 

digitized data stored in a flash memory, in a (re) "yes," the system allows the RO to continue to operate the 

programmable ROM or in similar information storage vehicle., in step 46, by enabling the ignition circuit so that 

media. the engine can be started. 

Alternatively, the identification indicium may be pre- 15 In step 45, the system optionally determines whether a 
sented through a keypad entry of information that is specific new ident indicium or sample is now required. This require- 
to and known to only the individual who presents the ment will recur at unpredictable times. If the answer to the 
information. This information may be entered as a coded question in step 45 is "no," the system recycles to step 39 
sequence of characters and/or may be entered as one or more and continues. If the answer to the question in step 45 is 
responses to questions posed by a personal interrogation 20 "yes," the system recycles to step 33 and continues, 
system and visual/audible display that are connected to the if tne answer to question (i) or question (ii), or both, in 
keypad. The keypad entry system may be used in place of, step 43 ^ « no> » the control system moves to step 47 and 
or to supplement, the BIRAM and/or the token, as a means ac tion according to Control Agenda no. 1. Control 
of authenticating the identity of the presenter. For ease of agenda no. 1 may include any or all of the 12 Control 
reference, an "ident indicium" will refer to a biometric 25 Actions that is consistent with restricting the RO's operation 
indicium and/or to a information contained in a token and/or 0 f tne vehicle. Optionally, the system recycles to step 39 or 
to information entered via a keypad, according to whatever to ste p 33 

is presented for identification. If me answer t0 me question in step 41 & « no » 7 me 

A biometric indicium could be used to identify a vehicle system moves to step 51 and determines if the driver has 

driver, and a token could be used to specify which route, status no. 2 (driver identified and authorized; not an RO). If 

plurality of routes or corridors) are permissible for opera- the answer to the question in step 51 is "yes," the system 

tion of the vehicle. The token could also be used to specify, determines, in step 53, (i) whether the vehicle location 

for example, a vehicle destination where a vehicle load is to and/or speed are within permitted ranges for the driver and 

be delivered; and a vehicle load locking mechanism would (y) whether the present time and/or accumulated time or 

permit "unlocking" and removal of the load only when the mileage are within permitted ranges for the driver. If the 

vehicle is located at the specified vehicle destination. Use of answers to question (i) and to question (ii) in step 53 are both 

a GPS-based vehicle load lock/unlock system is disclosed by "yes," the system allows the driver to continue to operate the 

Long in U.S. Pat. No. 5,648,763, incorporated by reference. vehicle., in step 56, by enabling the ignition circuit so that 

A biometric indicium and a keypad entry could required 4Q the engine can be started, 

to be used together, for example, to modify internal oper- In step 55, the system optionally determines whether a 

ating restriction tables for the vehicle. This would prevent new ident indicium or sample is now required. This require - 

anyone but an authorized system administrator from perma- ment will recur at unpredictable times. If the answer to the 

nently or temporarily modifying (in response to an unex- question in step 55 is "no," the system recycles to step 39 

pected situation) these internal restriction tables. This com- 4J and continues. If the answer to the question in step 55 is 

bination of a biometric indicium and a keypad entry (or a "yes," the system recycles to step 33 and continues, 

token) could also be used to enroll a new authorized driver if the answer to question (i) or question (ii), or both, in 

for the vehicle. step 53 is "no," the control system moves to step 57 and 

FIG. 2 is a flow chart illustrating the steps taken in one takes action according to Control Agenda no. 2. Control 

embodiment of the invention. In step 31, a vehicle driver 50 agenda no. 2 may include any or all of the 12 Control 

activates the vehicle by turning on the ignition system and Actions that is consistent with restricting the driver's opera- 

thereby activates the driver control system. In step 33, in tion of the vehicle. Optionally, the system recycles to step 39 

response to prompting from the control system, the driver or to step 33. 

provides a sample of his/her (first) ident indicium (a bio- If the answer to the question in step 51 is "no," the control 
metric indicium and/or a token or keypad entries). The order 55 system moves to step 61 and determines if the driver has 
of steps 31 and 33, among others, can be reversed or varied. status no. 3 (driver not identified or not authorized). If the 
In step 35, the control system either (i) identifies the driver, answer to the question in step 61 is "yes," the system takes 
based on the ident indicium presented, or (ii) determines that action according to Control Agenda no. 3, in step 63. Control 
the driver cannot be identified, because (ii/a) determines that Agenda no. 3 may include any or all of the 12 Control 
the ident indicium presented is not in the control system 60 Actions that is consistent with restricting the driver's opera- 
database, (ii/b) determines that the ident indicium presented tion of the vehicle. 

is not legible or readable, or (ii/c) determines that no ident i n step 65, the system optionally determines whether a 
indicium is presented. new ident indicium or sample is now required. This require- 
In step 37, the control system determines the status of the ment will recur at unpredictable times. If the answer to the 
driver, based on the biometric indicium: (1) RO; (2) iden- 65 question in step 65 is "no," the system recycles to step 39 
tified and authorized, but not an RO; (3) unidentified or and continues. If the answer to the question in step 65 is 
unauthorized; (4) non-identifiable because of poor quality of "yes," the system recycles to step 33 and continues. 



06/09/2004, EAST version: 1.4.1 



US 6,225,890 Bl 

9 10 

If the answer to the question in step 61 is "no," the control this first sample can be used to provide access to a selected 

system moves to step 71 and determines if the driver has vehicle in a fleet of vehicles. The fleet may be a fleet of rental 

status no. 4 (ident indicium presented is illegible or vehicles or a fleet of vehicles maintained by a business entity 

unreadable). If the answer to the question in step 71 is "yes," for use by its employees. An ident indicium, for example, a 

the system optionally requires the driver to provide a second 5 thumbprint, fingerprint, eye scan or voice print, is presented 

sample of an ident indicium (qualitatively different from the at a central station by a person who proposes to use a vehicle 

first sample of an ident indicium, as discussed previously), from the fleet. A particular vehicle is chosen, and a repre- 

in step 73. Optionally, the system then returns to step 37, sentation of the first sample is transmitted to an identifica- 

examines the second ident indicium and continues. If the tion module located in the chosen vehicle. When the person 

driver has exhausted the inventory of his/her ident indicium 10 arrives at the chosen vehicle, a second sample of the same 

entered and stored in the control system the system takes ident indicium is presented by the person to this identifica- 

action according to Control Agenda no. 4, in step 75. Control tion module and is analyzed and compared with the repre- 

agenda no. 4 includes any or all of the 12 Control Actions sentation of the first sample received by transmission from 

that is consistent with restricting the driver's operation of the the central station. If the first and second sample represen- 

vehicle. 15 tations substantially agree, the identification module allows 

In step 77, the system optionally determines whether a access to the chosen vehicle by the identified person. If the 
new ident indicium or sample is now required. This require- nrst and second sample representations do not substantially 
ment will recur at unpredictable times. If the answer to the agree, access is denied and, optionally, an alarm is trans- 
question in step 77 is "no," the system recycles to step 39 fitted to the central station or elsewhere. This approach (1) 
and continues. If the answer to the question in step 77 is 20 allows eacn vehicle in a fleet to be secured at all times and 
"yes," the system recycles to step 33 and continues. ( 2 ) allows only an already-identified person to gain access to 

Iftheanswertothequestioninstep71is«no,"thecontrol a chose ° vehicle Alternatively the first sample may be 

system moves to step 81 and determines if the driver has rec u eived *f stored > «"* °^ the ***** sample need be 

status no. 5 (no ident indicium presented by the driver). If subsequently presented to gain access to a specified vehicle 

the answer to the question in step 81 is "yes," the system 25 m u a group of vehicles or to allow the identified person to 

moves to step 83 and takes action according to Control subsequently operate the vehicle during the time interval 

Agenda no. 5, in step 73. Control agenda no. 5 includes any Q} 0 ™' davs ' weeks > for whlch of this vehicle 13 autho " 

or all of the 12 Control Actions that is consistent with n 

restricting the driver's operation of the vehicle. Alternatively, the vehicle driver of a land vehicle, a 

The system then moves to step 85 and optionally deter- 30 waterborne vehicle or an airborne vehicle may be restricted, 

mines whether a new ident indicium or sample is now statutorily, by regulation or because of empirical data, to 

required. This requirement will recur at unpredictable times. operation of the vehicle for at most a specified limit on the 

If the answer to the question in step 85 is "no," the system Dumber °{ consecutive hours without a rest for a time 

recycles to step 39 and continues. If the answer to the „ mterval of at leas * s P ecified len S th - M me number of 

question in step 85 is "yes," the system recycles to step 33 35 consecutive hours of vehicle operation approaches the speci- 

and continues limit, the driver can be advised, using a visually 

™ £ * < « ^ A * perceptible and/or audibly perceptible presentation device, 

The five status conditions no. 1, no. 2, no. 3, no. 4 and no. f, . 4 £. •« j r •* • u ■ u -j ** u *u 

- , A x . ^ , . , that this specified limit is being approached. Optionally, the 

5 are substantially mutually exclusive and are intended to ,. . r , , , , , 4 . - 5li \ i — 

ill i'v.' *t- * .i . c 4 . vehicle can be disabled (or some other suitable penalty 

cover all the possibilities so that at least one of the questions ^ . ,* , ... .> , . . , , r J 

j * .i . , . . AA -1 j oi 40 imposed) when this specified limit is exceeded, 

posed by the control system m steps 41, 51, 61, 71 and 81 r ' r 

should be answered "yes." For this reason, the path leading If the dnver 15 found to be unauthorized, based on a 

from step 81 for which the answer is "no" may be redundant, biometnc indicium presented or withheld, the vehicle use 

and the step 81 may be deleted, if desired. contro1 svstem can take an y or a11 of the 12 Control Actions. 

Receipt and analysis of a sample of an ident indicium 45 FIG - 3 is a flow chart illustrating the steps taken in this 

from a vehicle driver may also be used to determine whether embodiment of the invention. In step 91, a vehicle driver 

the driver may operate a vehicle that is carrying certain a ctivates the vehicle engine and thereby activates the driver 

restricted material. This restricted material may be a haz- control system. In step 93, in response to prompting from the 

ardous material or hazardous waste, such as nuclear fuel control system, the driver provides a sample of his/her (first) 

rods containing U235 or Pu239, carbon tetrachloride or 50 ident mdicium. The order of steps 91 and 93, among others, 

diethylstilbestrol or trichlo methylene, or mixtures thereof, can be reversed or varied. In step 95, the control system 

or other materials designated as hazardous or requiring either 0) identifies the dnver, based on the ident indicium 

special handling. Alternatively, this restricted material may presented, or (ii) determines that the driver cannot be 

be documents or computer-readable files containing confi- identified, because (ii/a) the ident indicium presented is not 

dential or commercially proprietary information or eviden- 55 in the control system database, (ii/b) the ident indicium 

tiary information whose custody must be restricted. In this presented is not legible or readable, or (ii/c) no ident 

instance, a vehicle driver is either (1) identified and autho- indicium is presented. 

rized or (2) unauthorized. The driver is directed to provide In step 97, the control system determines the status of the 

a sample of a biometric indicium for receipt and analysis by driver, based on an ident indicium presented, if any. In step 

a control system installed on the vehicle. If the driver is 60 tne system determines whether the driver is authorized 

found to be identified and authorized, the vehicle is allowed to operate the vehicle. Here, only the status (i) in step 95 is 

to move along a selected permitted travel corridor and acceptable. 

within a selected permitted travel time interval, where the if the ident indicium was presented by the driver and can 

present vehicle location and/or present time are provided by be identified, and if this ident indicium corresponds to an 

a location determination (LD) unit carried on the vehicle. ^5 authorized operator of the vehicle, the answer in step 99 is 

Receipt of an ident indicium ("first sample")* preferably "yes," and the driver is allowed to operate the vehicle, in 

a biometric indicium, and transmission of a representation of step 101; the system determines the vehicle present location 
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and speed (optional) and observation time (optional). In step Optionally, the system can maintain its own operations 

103 (optional), the system determines if the vehicle location log, including periodic recording of the present observation 

is within an authorized vehicle operation corridor or region. time, vehicle location and/or vehicle speed in a memory that 

If the answer to the question in step 103 is "yes," the system cannot be modified and that cannot be read out without 

optionally determines whether the vehicle speed is within an 5 presentation of a confidentially maintained access code, 

authorized speed range, in step 105. If the answer to the Where the system is provided with a vehicle operation 

question in step 105 is "yes," the system optionally deter- window, one or more time intervals within which operation 

mines whether the vehicle accumulated mileage (since of the vehicle 13 is permitted by the RO, the system 

vehicle mileage accumulation began) is within the autho- ^optionally provides a display that visually displays a per- 

rized accumulated mileage range, in step 106. If the answer 1Q mitted time interval PT1 and the present time on a screen or 

to the question in step 106 is "yes," the system optionally monitor 181 (FIG. 6) or audibly displays or present this 

determines if the vehicle accumulated operation time (since information using a loudspeaker 182 (FIG. 6) so that the 

vehicle operating time accumulation began) is within the vehicle driver is made aware of how much time remains for 

vehicle authorized accumulated time range, in step 107. If vehicle operation within the permitted time interval or 

the answer to the question in step 107 is "yes," the system 15 window. This may be desirable in an electrically-powered or 

optionally determines if the (present) observation time is hybrid-powered vehicle. 

within an authorized operation window, in step 108. If the The permitted time interval window of operation, the 
answer to the question in step 108 is "yes," the system permitted range of vehicle location coordinates, the permit- 
returns to step 99 or to another suitable step in the procedure. ted vehicle speed range and/or the permitted accumulated 

If (i) the ident indicium is not that of an authorized driver, 20 vehicle mileage range for a trip can be changed remotely, 

(ii) the ident indicium presented by the driver cannot be using toe communications module 30 or can be changed at 

identified, (iii) the ident indicium presented is not legible or the vehicle 13 by use of a confidentially maintained access 

readable, or (iv) no acceptable ident indicium is presented, <™*e, using a keypad or other data entry device. This 

the answer to the question in step 99 is "no." If the answer provides flexibility, for example, where the vehicle or RO is 

to any of the questions in steps 99, 103, 105, 106, 107 and 25 unexpectedly called upon to provide a service that was not 

108 is "no," the system moves to step 109 and implements contemplated when the permitted time intervals and ranges 

one or more of the 12 Control Actions, as appropriate. were originally set for the vehicle and/or for the RO. 

In the procedures illustrated in FIGS. 2 and 3, the control Conditions for operation of the vehicle 13 (FIG. 1) may 
system optionally allows the vehicle driver to "miss" pre- also be imposed irrespective of who operates the vehicle, 
senting up to consecutive number N-l (^1) of ident indi- 30 These conditions may include restrictions: on the geographi- 
cium samples while the vehicle is operating. Preferably, the cal region where the vehicle is operated; on the accumulated 
driver is required to respond to the first command to present mileage the vehicle can travel after the vehicle is activated; 
a ident indicium sample, which command will be issued at 011 the vehicle speed; on the time intervals during which a 
or around the time the vehicle is activated. If the driver vehicle can be operated; and/or on the accumulated time for 
"misses" responding to N of these commands, the control 35 vehicle operation. FIGS. 4A/4B are a flow chart illustrating 
system takes one or more of the 12 Control Actions, includ- this embodiment. In step 131, a vehicle driver activates the 
ing optionally transmitting an alarm signal, including the vehicle (engine) and thereby activates the driver control 
present location of the vehicle, is to the local law enforce- system. In optional steps 133 and 135, the system deter- 
ment authorities and/or to the "owner" of the restricted mines the vehicle present location and determines whether 
material carried on the vehicle. If the driver presents an ident 40 the vehicle location is within a permitted geographic region 
inidicium sample but the sample is illegible or non-readable for vehicle operation. The permitted region may include one, 
because it was presented too hurriedly, presentation of this two or many isolated component regions. If the answer to 
illegible or unreadable sample is counted as a "miss." the question in step 135 is "no", the system moves to step 
Optionally, if the driver does not present an ident indicium 1^3* 

in response to one or more consecutive requests or com- 45 If the answer to the question in step 135 is "yes", the 

mands to do so, the time At between any two consecutive system moves to optional steps 137 and 139. In steps 137 

subsequent requests can be successively shortened until the and 139, the system determines the accumulated mileage the 

driver responds or N consecutive requests are "missed," vehicle has traveled after the vehicle is activated or moved 

whichever first occurs. and determines whether this accumulated mileage exceeds a 

The embodiment corresponding to FIG. 3 can be imple- 50 selected threshold mileage. If the answer to the question in 

mented to ensure that only a relatively small group of step 139 is "yes", the system moves to step 153. 

authorized personnel is permitted to unrestrictedly drive a If the answer to the question in step 139 is "no", the 

particular vehicle, or any of a fleet of such vehicles. For system moves to optional steps 141 and 143. In steps 141 

example, this embodiment can be implemented to ensure and 143, the system determines the vehicle present speed 

that only a police officer can unrestrictedly drive any of a 55 and determines whether the vehicle speed is within at least 

designated fleet of police vehicles; or that only a trained and one permitted time interval for vehicle operation. If the 

authorized hazardous substance handler can operate a land, answer to the question in step 143 is "no", the system moves 

waterborne or airborne vehicle that actually transports haz- to step 153. 

ardous substances. If the answer to the question in step 143 is "yes", the 

The invention can also be used to monitor operation of the 60 system moves to optional steps 145 and 147. In steps 145 

vehicle by a teenager or other inexperienced driver, with and 147, the system determines the present time and deter- 

restrictions imposed upon vehicle operation channel, total mines whether the present time is within at least one 

vehicle mileage, vehicle maximum speed and/or time inter- permitted time interval for vehicle operation. If the answer 

val of operation of the vehicle. An automobile insurance to the question in step 147 is "no", the system moves to step 

company might even provide a discount on premiums cov- 65 153. 

ering operation of the vehicle by an RO, where the vehicle If the answer to the question in step 147 is "yes", the 

has this system installed and operating. system moves to optional steps 149 and 151 and determines 
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whether the accumulated vehicle operating time (since the vehicle component, such as vehicle engine, vehicle trans- 
vehicle was last activated) is within at least one permitted mission system, vehicle fuel supply, vehicle power supply 
range for such accumulated operating time. If the answer to and accessories (considered as part of the vehicle), for use 
the question in step 151 is "no", the system moves to step i° controlling or restricting operation of the vehicle. The 
153. If the answer to the question in step 151 is "yes", the 5 vehicle interface 182 optionally includes one or more inter- 
system optionally recycles to step 133 or some other appro- face out P ut terminals 183A, 183B, 183C that connect to the 
priate preceding step in the sequence. vehicle components to be controlled. The vehicle interface 
« « . . 182 optionally includes one or more interface input termi- 
In step 153, the system takes at least one of the 12 Control Qals ^ lg4B> lg4C ^ CQnnect tQ a M different 

Actions and optionally returns to step 133 or an appropriate group of vehicle components (doors, ignition, alarm system, 
preceding step in the sequence. ™ vehicle carg0j accessories, etc.) whose activation may indi- 
FTG. 5 is a flow chart illustrating this enhancement of the cate that someone is preparing to drive the vehicle, which 
invention. In step 161, the vehicle engine is activated. In step would activate a driver interrogation sequence. The vehicle 
163, the system determines if sufficient LD signals of interface 182 and associated information bus may, if desired, 
acceptable quality are being received so that the vehicle be provided according to the serial data communications 
location can be determined. If the answer to the question in 15 standards between microcomputers in a vehicle, as set forth 
step 163 is "yes", the system moves to step 39 in FIG. 2A, in S.A.E. Documents J1708 and J1587, 
to step 101 in FIG. 3, or to step 133 in FIG. 4A, as the case The controller module 179 includes a specially pro- 
may be, determines the vehicle present location (step 165 in grammed computer to carry out the tasks assigned to the 
FIG. 5), and continues with the remaining steps (e.g., 135 in controller module; the controller module 179 and LD mod- 
FIG. 4A) of the embodiment chosen. If the answer to the 20 ule 173 may coincide or both be parts of a larger module that 
question in step 163 is "no", the system takes action under includes a computer. 

a Control Agenda No. 6, in step 167, where the system may a p para tus 170 also includes a telecommunication 

take one or more of the 12 Control Actions, as discussed in mo dule 185 (optional), including an antenna 187 and asso- 

the preceding paragraph. The steps 163-167 may replace ciated receiver/transmitter 189 that exchanges information 

step 139 in FIG. 2A, step 101 in FIG. 3 and/or step 133 m signals ^ an information processing facility (not shown) 

FIG. 4A. tnat S p ace d apart from the apparatus 170. The information 

FIG. 6 schematically illustrates apparatus 170 suitable for processing facility can transmit signals that modify, add or 

practicing the invention. The apparatus 170 includes an LD delete vehicle operation restrictions, for receipt by the 

module 173, including an LD signal antenna 174 and 3Q apparatus 170, and that allow downloading of commands 

associated LD signal receiver/processor 175, that receive ma t alter restrictions on present location, speed and/or 

and analyze LD signals to determine present location and/or present time, accumulated operating time and accumulated 

present speed of the LD antenna. A biometric indicium mileage items that determine the conditions under which a 

receiving and analysis mechanism (BIRAM) 177 receives vehicle operation restriction is imposed. Downloading of 

from a vehicle operator or otherwise measures a biometric 35 modifying information to a portable, integrated GPS and 

indicium at one or more selected times. Information cellular phone transceiver is available with the Trimble 

obtained by the BIRAM 177 from the biometric indicium Navigation Crosscheck AMPS Cellular Unit (Sunnyvale, 

presented, if any, is sent to a controller module 179 and Calif.). Suitable telecommunication systems here include 

associated memory module 180 to determine, where cellular phone, trunked radio, unlicensed radio band, packet 

possible, the identity of a vehicle operator who has presented ^ radios in LAN or MAN or WAN operation and the like. The 

the indicium. Where presentation of a biometric indicium is present invention allows downloading from a remote facility 

not required in order to operate the vehicle, the BIRAM 177 to modify or add to the extant parameters for vehicle 

can be deleted. operation or for vehicle driver identification, where the 

The apparatus 170 optionally includes an input terminal parameters are included in operating code, stored data and 

171 to receive information from a vehicle odometer (not 45 the like. 

shown) or similar distance indicating device to supplement The apparatus 170 includes an optional token receiving 

information provided by LD signals received by the LD an d analysis mechanism (TRAM) 191 that receives and 

module 173. The apparatus 170 optionally includes an input analyzes a token, presented by a would-be vehicle driver, 

terminal 172 to receive information from an inertial navi- containing personal information on the (putative) token 

gation device INS (not shown) or similar location indicating 50 holder and/or information on limitations under which the 

device to supplement information provided by LD signals token holder can operate a vehicle. Information obtained by 

received by the LD module 173. the TRAM 191 is communicated to the controller 179 for 

Information on the present vehicle location and/or vehicle / implementation and/or for comparison of the identity of the 

speed and/or time and/or accumulated operating time and/or token holder with a database of authorized vehicle operators, 

accumulated mileage is sent by the LD module 173 to the 55 The apparatus 170 includes an optional data entry module 

controller module 179 at one or more selected times for 193 (keypad, floppy drive, CD ROM drive, etc.), for entry 

comparison of this information with any vehicle operation of information and response to commands, and a personal 

restrictions that may be imposed on an identified or uniden- information analysis (PIA) module 195 that analyzes the 

tified vehicle operator, based on biometric indicium information entered through the data entry module 193, in 

information, if any, received by the controller module from 60 order to identify the person who enters this information 

the BIRAM 177. Where one or more vehicle operation and/or to add or modify information already recorded, 

restrictions are imposed by the controller module 179, these Information obtained by the PIA module 195 is sent to the 

restrictions are optionally displayed visually and/or audibly controller 179 for implementation and/or for comparison of 

to the vehicle operator, using a visual and/or audible display the identity of the token holder with a database of authorized 

module 181. 65 vehicle operators. 

The controller module 179 is also connected to a vehicle A power supply 197 supplies power to operate one or 

interface module 182 that is in turn connected to at least one more of the other components of the apparatus 170. 
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The apparatus 170 can be installed in the vehicle dash- of the controller module 209, information in one or more of 
board or elsewhere in the vehicle. Alternatively, the appa- the following categories may be stored in the database: (1) 
ratus 170 can be provided as a stand-alone device that name or other identifier; (2) corresponding ident indicium or 
communicates directly with at least one of the vehicle indicia; (3) schedule applicable to driver; (4) actual range of 
engine, vehicle transmission system, vehicle fuel supply, 5 vehicle locations; (5) actual range of vehicle speed; (6) 
selected vehicle accessories and vehicle power supply so actua i tmies 0 f vehicle operation; (7) present "state" of the 
that the vehicle will not operate unless the apparatus 170 is vehicle (vehicle loaded/unloaded, type or vehicle load, pas- 
present and active. sengers present, etc.); and (8) corresponding Control Actions 

FIG. 7 illustrates operation of one embodiment of a applicable to various circumstances. This information may 

vehicle use control system 200 for control of use of a 1Q be contained m tne controller module 209 and/or the sched- 

vehicle. Information from biometric samples, tokens and/or ule module 2U and/or tfae vehicJe activit { module 217 

keypad entries presented for identification of a would-be _ . f . , , .. . ; 

vehicle operator are received by an identifier module 201 Some portions of the preceding detailed description are 

from one or more of a BIRAM 203, a TRAM 205 and a data presented m terms of procedures, logic blocks, processing 

entry device and PIA module 207 (keypad, floppy diskette and other symbolic representations of operations on lnfor- 

reader, CD ROM reader or the like). The identifier module 15 mation bits within a microprocessor. These descriptions and 

201 analyzes the ident indicium or indicia presented and representations are the means used by those skilled in the 

transmits the ident information, or a representation thereof, data processing arts to most effectively convey the substance 

to a controller 209, which includes a computer and a of their work to other skilled in the art. In the present 

memory unit that contains a database with identities and application, a procedure, logic block, process or other sym- 

matching indicia for one or more authorized drivers of the 20 bolic representation is contemplated to be a self-consistent 

vehicle. The controller 209 receives information from a sequence of steps or instructions leading to a desired result, 

schedule module 211 that contains various limitations on The steps are those requiring physical manipulations of 

vehicle operation for each authorized vehicle operator and, values representing physical quantities. Often, these values 

optionally, "default" limitations applicable to one or more ta k e me f orm 0 f electrical or magnetic signals that can be 

unidentified vehicle drivers. The schedule module 211 2 5 stored, transferred, logically combined, compared and oth- 

optionally includes limitations on geographic regions, cor- erwise manipulated in a computer system. It is convenient at 

ridors or routes where the vehicle may be driven, one or times to refer tQ mese si k M K ^ b ^ elementS) 

more permitted time intervals during which the vehicle may ho]& charact t number ^ the like . 

be operated, one or more permitted speed ranges for opera- ' .„ j ■ -i * * u 

tion of the vehicle, and one or more limitations on vehicle 30 ° f these ,erm f. and ? m ?" terms ,' re to * associat « d 

transmission ranges permitted for operation of the vehicle. wth ,he corresponding physical quantities and are merely 

- rn , ~<ux i ■ i j t t\ a a i <>ii *u * i convenient labels associated with the physical quantities. 

The system 200 also includes an LD fix module 213 that I TT , . a „ . . , 4U . . • * ,7 * 

* . - . «_ • ij4 . *ui Unless specifically stated otherwise, discussions that utilize 

uses location determmation techniques to determine the » terms ^ ag „ receivi . Wraitting » « measurin g» 

present location and/or the present speed and/or ^ present estimati „ UcompMiag ^ p erformilJ g» and "determining" 

(observation) time for the vehicle . The LD fix module 213 35 and Ae ^ tekt P t0 J tio £ ^ ^ of a £ r 

communicates this mformabon to the controller module 209. of other electroni( . tin devi 

The controller module 209 determmes wh.ch Control Action J ^ f ^ a ^ ^J It J ^.smits, 

(s), if any, should be imposed on vehicle use and commu- el ^ ctronical f filters or othenvise ele ctromagnetically 

nicates this information to a Control Action interface module :„„i nt ^ L „^ mc *u ~~ „ (flr c ,„t im ^ 

. . , . ... . . mampulates or transforms signals. The computer system or 

215 for implementation by the vehicle engme, transmission, 40 omer F smlilar ekctronic mm ^ g device maDipu ia, es and/ 

fuel supply, braking system, air bag system velucle acces- of transforms Mormlitioa re £ rese * te d as eiecti omc or simi- 

sory or other appropriate system on the vehicle. The con- , .... r , . ^ , 

11 • ,1 • . t.- 1 • c lar quantities within the computer system s registers and 

troller 209 optionally communicates vehicle operation infor- 71 - . , ^. . c *■ *l * • • -i i * j 

v A . t J , . , - • _ j , memones mto other mformation that is similarly represented 

mation to a vehicle activity log module 217 that receives and . . .... .... * * 

. - . j * , . , , as electronic or other quantities within the computer system 

stores mformation on vehicle location and/or vehicle speed 45 . . . . - . ,. , .\ 

,. , 4 - *• r u 4 • j f . w registers, memones, information storage, display and trans- 

and/or observation time for subsequent review and analysis ? . , . rp/ 4 . • 1 •* ui <* 

, , .,i • mission devices. Ine present invention is also suitable lor 

if desired. The controller module 209 optionally commum- ... f . . . . . _ , 

.-1 use with other computer systems, such as optical, mecham- 

cates one or more limitations to be imposed on the vehicle ^ biological comouters 

and its driver to a feedback module 219 for visually or , 

audibly perceptible presentation to the driver. The controller 50 . ^ » g^rahzed embodiment, the system disclosed here 

module optionally includes a data transfer module 221 that includ i es one or 11 more menus that are simulta- 

allows information on vehicle activity that has been logged neouslv or f co f ulted [°. monitor vehicle use. A first 

to be copied from or removed from the system for subse- menu for * of biometnc indicium or indicia 

quent analysis or storage. presented for identification of the person. This first menu 

T - , , . 1 jj * . .( 1 * * c includes one or more of: 

If an additional person is to be added to the list 01 55 

authorized drivers of the vehicle, the name and other rel- fingerprint; 

evant details about this person are added to the system using thumbprint; 

the data transfer module 221, which communicates with at handprint; 

least one of the identifier module 201 and the controller hand silhouette; 

module 209. The person whose name is to be added may be 60 cursive signature; 

called upon to supply one or more biometric indicia through facial imaee* 

the BIRAM 203 and/or one or more tokens through the . . 8 ' 

TRAM 205 and/or one or more data entries through the PIA ins scan; 

module 207, which information is then analyzed and pro- retinal scan; 

vided for storage in the controller 209. 65 voiceprint; 

For each authorized driver whose name or other identi- blood vein pattern scan; 

fying characteristics are contained in the database that is part blood sample analysis; and 
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any other biometric indicium that can reasonably be 
presented and analyzed. 

A second menu sets forth one or more classes, if any, of 
ROs to which the driver (who has presented a biometric 
indicium) belongs, including: 

very young drivers; 

very old drivers; 

physically or mentally impaired drivers; 



7, reports a facial recognition system developed by Roman 
Kuc of Yale University that uses three spaced apart sonic 
beams to analyze and recognize a facial image, and many 
other images with fine detail. Hand geometry recognition is 
provided by Personal I.D., offered by Recognition Systems 
(URL http:///www.recogsys.com/pid.html). American Bio- 
metric Company (URL http: ///www. abio.com/body_ 
index.html) offers the Bio Mouse Desktop Fingerprint Scan- 
ner. The VeriVoice product by VeriVoice (URL http:/// 



drivers with restricted driving licenses (for example, iq www.verivoice.com/product.html) provides a voice analysis 



DUI-convicted drivers); 
transporters of hazardous substances; and 
any other reasonable classes of RO drivers. 
A third menu sets forth the classes of limitations to be 
imposed on the driver, including: 

restriction to a selected geographic region; 

restriction to one or more specified routes (e.g., to allow 

a DUI driver to commute to and from work); 
restriction to a selected maximum accumulated mileage 

within a 24-hour period; 
restriction to a selected maximum accumulated time of 

operation within a 24-hour period; 
restriction to a selected maximum speed; 



15 
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and recognition system, Shurlock Security Systems (URL 
http :///www.fia.net/shurlock/features. html) offers Touch & 
Go, which enables and disables a vehicle engine system, 
based on entry of any one of twenty 64-bit engine security 
keys. The EU Veincheck project, which interrogates the 
body locally to determine a blood vein pattern for use in 
personal identification and access control, is discussed in 
Biometric Technology Today, September 1996, pages 1-2. 

U.S. Pat. No. 4,817,432, issued to Wallace et al, discloses 
an ultrasonic scanner for measuring the corneal thickness 
and axial length of a human eye that is presented to the 
system. U.S. Pat. Nos. 5,222,152 and 5,230,025, issued to 
Fishbine et al, disclose portable fingerprint scanning appa- 
ratus that optically scans, records and transmits fingerprint 



restriction of vehicle operation to one or more selected 25 ww* wireless ch annel to^ a mobile unit for ana lysis 

r and verification. U.S. Pat. No. 5,229,764, issued to Matchett 



time intervals during the day, or to selected days during 
the week; and 
similar reasonable restrictions on vehicle operation. 
A fourth menu sets forth the classes of penalties or 
externally imposed restrictions, if any, to be imposed if the 
vehicle driver is found to be operating outside the permis- 
sible vehicle operating range(s), including: 

halting the vehicle immediately or within a short time 

interval; 
fuel cutoff; 

disabling the air brakes on a truck or bus; 

disabling use of selected vehicle accessories; 

reducing the vehicle speed to a maximum selected speed 

using a speed "governor"; 
limiting the vehicle accumulated mileage or accumulated 

operation time to a selected range; 
forcing the vehicle to operate in selected lower gears; 



30 
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et al, discloses a biometric authentication matrix that simul- 
taneously identifies one or more biometric indicia, including 
thumbscan, digital photo, voiceprint and fingerprints). U.S. 
Pat. Nos. 5,259,025 and 5,268,963, issued to Monroe et al, 
disclose use of a card including facial representation, 
fingerprint, cursive signature, voice print and retinal eye 
scan for personal identification. U.S. Pat. No. 5,280,527, 
issued to Gullman et al, discloses provision of a biometric 
system that receives and analyzes a token having a time 
varying code and including biometric information on a 
person's voiceprint, cursive signature, fingerprint and simi- 
lar indicia. U.S. Pat. No. 5,291,560, issued to Daugman, 
discloses an iris scanner for an eye that provides an "optical 
40 fingerprint." U.S. Pat. Nos. 5,335,288 and 5,483,601, issued 
to Faulkner et al, disclose a system that receives and 
analyzes a silhouette of a person's hand, plus a scanned 
portion of the hand, for personal identification. U.S. Pat. No. 
5,563,453, issued to Gagne et al, discloses a fingerprint 



turning the vehicle lights or external flashers or horn on 45 identifier that uses a 24-byte code for storing this informa- 



continuously or periodically; 
activating an on-board alarm that is audibly or visually 

perceptible alarm to someone outside the vehicle; 
activating an air bag on the driver's side of the vehicle; 
transmitting a silent alarm to a central vehicle monitoring 

facility; 

disallowing operation of the vehicle by the offending 
driver within a selected geographic region for a speci- 
fied time interval; 

presenting a visually perceptible and/or audibly percep- 
tible warning that the vehicle is operating, or will soon 
operate, outside one or more permissible operating 
ranges; 



tion. U.S. Pat. No. 5,469,506, issued to Berson et al, 
discloses provision of an identification card including bio- 
metric information, such as a fingerprint or a cursive signa- 
ture on the alleged holder of the card; the holder's own 
50 biometric characteristics are scanned in and compared with 
the information contained on the card. U.S. Pat. No. 5,534, 
855, issued to Shockley et al, discloses a system that 
receives and analyzes biometric indicia to determine which 
tasks a person is authorized to perform. U.S. Pat. No. 
55 5,579,909, issued to Deal, discloses use of a thumbprint 
scanning and recognition system to allow access to a locked 
box that may contain one or more dangerous instruments, 
such as firearms or other weapons. U.S. Pat. No. 5,586,171, 



issued to McAllister et al, discloses use of a voice recogni- 

logging the violation and offending driver, with no imme- go tion system that responds to and analyzes video data pre- 

diate penalty imposed; and sented in response to prompting of a person. U.S. Pat. No. 

any other reasonable penalty. 5,594,806, issued to Colbert, analyzes the contour of knuck- 

Systems for obtaining and analyzing one or more biomet- les of a hand that is presented for personal identification, 

ric indicia are disclosed in the printed literature and on the U.S. Pat. No. 5,638,832, issued to Singer et al, discloses 

Internet. Facelt 3.0 from Visionics (URL http:/// 65 provision of a small liquid crystal visual display, implanted 

www.faceit.com) uses video images to analyze and recog- just beneath the epidermis in the human skin, to provide a 

nize facial geometry. Wired Magazine, February 1998, page readable display for continuous biosensor information or for 
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human "tagging." The information in these articles and when the present time is within said permitted time 

patents is incorporated by reference herein. interval and the vehicle present location coordinates do 

Although this invention has been discussed primarily in no t U e within the permitted travel region, taking at least 

the context of restrictions on use of a land vehicle, such as one control Action to control use of said vehicle, 

an automobile, a truck or a bus, the invention has application 5 2 The method of claim x fnx±RT comprising the step of 

to a waterborne vehicle, such as a boat, and has application choosi sdd at ^ Qne actioQ tQ contfol ^ of ^ 

to an airborne vehicle such as an aircraft, if changes are d of Control of . (1) 

made m the Control Actions menu. For example, it probably U1 . . . . 4 t 4 , . 4 . t -f u -\ 

would not be appropriate to include the penalties of fuel dis f hn S Mld vehl ^ e at a , selected me " . mat ™ d ve , m ^ 

cutoff, restriction of operation of the vehicle to lower gears, in n ? lon S er for at least a selec ed llme mtelv ^ ( 2 > 

or activation of an airbag for waterborne or airborne 10 disabling operabihty of one or more selected accessories for 

vehicles sa * d vehicle; (3) reducing the speed of said vehicle to a 

I claim* selected speed range; (4) allowing said vehicle to operate 

1. A method for restricting use of a vehicle, the method onl y in one or more selected vehicle transmission gears; (5) 

comprising the steps of- turning on at least one of lights, exterior flashers and vehicle 

providing a permitted range of location coordinates, cor- 15 horn f ° r at . least °° e elected time interval; (6) activating an 

responding to one or more permitted vehicle travel alam 18 v^uaUy perceptible or audibly perceptible by a 

• j j • * i a' *■ person located outside of and adjacent to said vehicle; (7) 

regions, and a permitted time interval, corresponding to * . . , , , J , , . 

+ i 7 m **~A ~ »,u;„u\ transmitting a selected alarm signal to a selected facility that 

at least one permitted region, within which a selected . 6 f ^ /ox . . 4 , ' 

vehicle mav travel* ^ s P acec * a P art "" om saic * venic l e ; (p) activating at least one 

„ . A i / j j ■ u- u *u u- i • 20 air bag on said vehicle; (9) allowing said vehicle to operate 

for at least one selected time during which the vehicle is „ * 4 i * j i *■ *• • * i /m\ « 

, , - • *u * *• a a * • for at most a selected cumulative time interval; (10) allow- 

m motion, determining the present time and determin- . ., , . . , .... i * j 

•r 4t . B . L t1 t . . j mg said vehicle to operate only within one or more selected 

ing if the present time is within at least one permitted 4 . . 4 , /.,/,, * j , 4 . r 

. B . y , r time intervals; (11) allowing said vehicle to operate for at 

me in erva , . , . , . t most a selected cumulative vehicle mileage; and (12) record- 
when the present time is not withm at least one permitted 25 { mformation that describes present activity of said 
time interval, taking at least one Control Action to vehicle 

control use of the vehicle; 3 The method of daim ^ compr ising the step of: 

when said present time is within a permitted time interval, wheQ ^ t ^ ^ ^ said ^ ^ 

providing a permitted range of location coordinates ^ ^ t ]Qc Jj on 

corresponding to one or more permitted venicle travel 30 ... ... , \ , . „ 

. F , * . . 4 , . 4 . 4 . he withm said permitted travel region, allowmg said 

regions, determining the vehicle present location , 4 *• * r *i * 1 * j*- 

. . , j j ? *u u- 1 * vehicle to continue to move for at least a selected tune 

coordinates, and determining if the vehicle present interval 

location coordinates lie within a permitted travel region A ~ , - , . - jL . . tU , - 

... j 4* - + 1 4. The method of claim 1, further comprising the step of 

correspomlmg to said permitted time uiterval; modifyin at ^ one of said ^ ^ 

said step of determining said vehicle present location 35 5 ^ method of daim 4 

comprising the step of 

coordinates comprises the steps of : modifying said location coordinates contained in at least one 

attempting to receive location determination (ID) sig- of ^ permitted time ranges . 

nals from one or more selected LD signal sources; 6 The method of daim j j,,^^ ^ rfsi (he st of 

determining if sufficient LD signals are being received modifying al least 0De of ^ permitted lime intervals. 

to determine said vehicle present location coordi- 40 ? _ The me , hod of ^ 6> whefein Mid 

step of modifying 

nates; sa j d permitted range of time comprises transmitting a 

when sufficient LD signals are being received, deter- ch si ^ , 0 said vehfcle mat modifies ^ mitted 

mining said vehicle present location coordinates; and ^ interval 

when sufficient LD signals are being received, taking at g ^ of claim j 03^^ the step of 

least one action drawn ^ from the class of Control 45 modirymg said loca tion coordinates contained in at least one 

Actions consisting of: (1) disabling said vehicle at a of ^ permitted time ranges . 

selected time so that said vehicle no longer operates 9 ^ method of daim 8> wherdn ^ ste of modifying 

for at least a selected tune interval; (2) disablmg ^ of location coordinates for ^ permitted time 

operabihty of one or more selected accessories for range comprises transmitting a change signal to said vehicle 

saidvemcle;(3)redu a ngthespeedofsaidvekcleto 50 ma , modifies ^ location coordinates stained in said 

a selected speed range; (4) allowing said vehicle to permitted time range. 

operate only in one or more selected vehicle trans- 10 ^ memod of claim x ^ lhe st 

mission gears; (5) turning on at least one of lights, Q £. 

exterior flashers and vehicle horn for at least one . . . , - 

selected time interval; (6) activating an alarm that is 55 Priding at least one permuted speed range for said 

visually perceptible or audibly perceptible by a per- venicle, 

son located outside of and adjacent to said vehicle; when said vehicle is in motion, determining the present 

(7) transmitting a selected alarm signal to a selected speed of said vehicle; 

facility that is spaced apart from said vehicle; (8) when the present vehicle speed is not within a permitted 

activating at least one air bag on said vehicle; (9) 60 speed range, taking at least one Control Action to 

allowing said vehicle to operate for at most a control use of said vehicle. 

selected cumulative time interval; (10) allowing said 11. The method of claim 10, further comprising the step 

vehicle to operate only within one or more selected of modifying said permitted speed range for said vehicle, 

time intervals; (11) allowing said vehicle to operate 12. The method of claim 11, wherein said step of modi- 

for at most a selected cumulative vehicle mileage; 65 fying said permitted speed range for said vehicle comprises 

and (12) recording information that describes present transmitting a change signal from a monitoring station to 

activity of said vehicle; and said vehicle that modifies said permitted speed range. 
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13. The method of claim 1, further comprising the steps 

of: 

providing a permitted accumulated mileage range for 
operation of said vehicle within said permitted time 
interval; 5 

determining the present accumulated mileage range of 
said vehicle within said permitted time interval; and 

when the present accumulated mileage range is not within 
the permitted accumulated mileage range, taking at 1Q 
least one action drawn from the class of said Control 
Actions. 

14. The method of claim 13, further comprising the step 
of modifying said permitted accumulated mileage range for 
said vehicle. 15 

15. The method of claim 14, wherein said step of modi- 
fying said permitted accumulated mileage range for said 
vehicle comprises transmitting a change signal to said 
vehicle that modifies said permitted accumulated mileage 
range. 20 

16. The method of claim 1, further comprising the steps 

of; 

providing a permitted accumulated vehicle operation time 
for said vehicle within said permitted time interval; 

determining the present accumulated vehicle operation 25 
time for said vehicle within said permitted time inter- 
val; and 

when the present accumulated vehicle operation time is 
greater than the permitted accumulated vehicle opera- 
tion time, taking at least one action Control Action to 30 
control use of said vehicle. 

17. The method of claim 16, further comprising the step 
of modifying said permitted accumulated vehicle operation 
time for said vehicle. 

18. The method of claim 17, wherein said step of modi- 35 
fying said permitted accumulated vehicle operation time for 
said vehicle comprises transmitting a change signal to said 
vehicle that modifies said permitted accumulated vehicle 
operation time. 

19. The method of claim 1, further comprising the steps 40 

of: 

requiring a driver of said vehicle to present a token before 
the driver can operate said vehicle, where the token 
contains information that allows determination of at 
least one of (1) identity of the presenter of the token, (2) 45 
a permitted time interval and (3) a permitted travel 
region in which said vehicle can operate; and 

reading the information contained on the token. 

20. A method for restricting use of a vehicle by a vehicle 
operator, the method comprising the steps of: 

for at least one selected time during which an operator 
operates a selected vehicle, requesting the operator to 
provide a selected ident indicium, within a selected 
indicium time interval, for interrogation; and 55 

when the operator does not provide the requested ident 
indicium within the selected indicium time interval, or 
when the operator provides the requested ident indi- 
cium and (i) the ident indicium cannot be interrogated 
or (ii) the ident indicium is interrogated but the operator go 
cannot be identified by the indicium or (iii) the ident 
indicium is interrogated and the operator is identified as 
a restricted operator for whom operation of the vehicle 
is restricted in some manner, taking at least one Control 
Action to control use of the vehicle; 55 

choosing said at least one action to control use of said 
vehicle from the class of Control Actions consisting of: 



50 



(I) disabling said vehicle at a selected time so that said 
vehicle no longer operates for at least a selected time 
interval; (2) disabling operability of one or more 
selected accessories for said vehicle; (3) reducing the 
speed of said vehicle to a selected speed range; (4) 
allowing said vehicle to operate only in one or more 
selected vehicle transmission gears; (5) turning on at 
least one of lights, exterior flashers and vehicle horn for 
at least one selected time interval; (6) activating an 
alarm that is visually perceptible or audibly perceptible 
by a person located outside of and adjacent to said 
vehicle; (7) transmitting a selected alarm signal to a 
selected facility that is spaced apart from said vehicle; 
(8) activating at least one air bag on said vehicle; (9) 
allowing said vehicle to operate for at most a selected 
cumulative time interval; (10) allowing said vehicle to 
operate only within one or more selected time intervals; 

(II) allowing said vehicle to operate for at most a 
selected cumulative vehicle mileage; and (12) record- 
ing information that describes present activity of said 
vehicle; 

said step of allowing a restricted operator to operate the 
vehicle only within a selected geographic region and 
only within one or more selected operation time inter- 
vals comprises the steps of: 

providing a permitted range of location coordinates, 
corresponding to said permitted region, and a per- 
mitted time interval, corresponding to said permitted 
region, within which said vehicle may travel when 
operated by the restricted operator; 

when the restricted operator is determined to be oper- 
ating the vehicle, determining the present time and 
determining if the present time is within at least one 
permitted time interval; 

when the present time is not within at least one per- 
mitted time interval, taking at least one action drawn 
from the class of said Control Actions; 

when said present time is within a permitted time 
interval, determining the vehicle present location 
coordinates, and determining if the vehicle present 
location coordinates lie within a permitted range of 
location coordinates corresponding to said permitted 
time interval; 

when the present time is within said permitted time 
interval and the vehicle present location coordinates 
do not lie within the permitted range, taking at least 
one action drawn from the class of said Control 
Actions; 

when said present time is within said permitted time 
interval and said vehicle present location coordinates 
lie within said permitted range, allowing said 
restricted operator to operate said vehicle for at least 
a selected time interval; 

modifying a permitted range of time for at least one of 
said permitted time intervals; 

modifying said location coordinates contained in at 
least one of said permitted time ranges; 

said step of determining said vehicle present location 
coordinates comprises the steps of: 
attempting to receive location determination (LD) 
signals from one or more selected LD signal 
sources; 

determining if sufficient LD signals are being 
received to determine said vehicle present location 
coordinates; 

when sufficient LD signals are being received, deter- 
mining said vehicle present location coordinates; 
and 
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when sufficient LD signals are being received, taking 
at least one action drawn from the class of Control 
Actions consisting of, (1) disabling said vehicle at 
a selected time so that said vehicle no longer 
operates for at least a selected time interval; (2) 5 
disabling operability of one or more selected 
accessories for said vehicle; (3) reducing the speed 
of said vehicle to a selected speed range; (4) 
allowing said vehicle to operate only in one or 
more selected vehicle transmission gears; (5) turn- Jfl 
ing on at least one of lights, exterior flashers and 
vehicle horn for at least one selected time interval; 
(6) activating an alarm that is visually perceptible 
or audibly perceptible by a person located outside 
of and adjacent to said vehicle; (7) transmitting a 
selected alarm signal to a selected facility that is 15 
spaced apart from said vehicle; (8) activating at 
least one air bag on said vehicle; (9) allowing said 
vehicle to operate for at most a selected cumula- 
tive time interval; (10) allowing said vehicle to 
operate only within one or more selected time 20 
intervals; (11) allowing said vehicle to operate for 
at most a selected cumulative vehicle mileage; and 
(12) recording information that describes present 
activity of said vehicle. 

21. The method of claim 20, further comprising the step 2 s 

of: 

when said present time is within said permitted time 
interval and said vehicle present location coordinates 
lie within said permitted range, allowing said restricted 
operator to operate said vehicle for at least a selected 30 
time interval. 

22. The method of claim 21, further comprising the step 
of modifying a permitted range of time for at least one of 
said permitted time intervals. 

23. The method of claim 22, further comprising the step 

of modifying said location coordinates contained in at least 35 
one of said permitted time ranges. 

24. The method of claim 20, further comprising the step 
of modifying a permitted range of time for at least one of 
said permitted time intervals. 

25. The method of claim 24, wherein said step of modi- 40 
fying said permitted range of time comprises transmitting a 
change signal to said vehicle that modules said permitted 
time interval. 

26. The method of claim 20, further comprising the step 

of modifying said location coordinates contained in at least 45 
one of said permitted time ranges. 

27. The method of claim 26, wherein said step of modi- 
fying said range of location coordinates for said permitted 
time rang e comprises transmitting a change signal to said 
vehicle that modifies said location coordinates contained in 5Q 
said permitted time range. 

28. The method of claim 20, further comprising the steps 

of: 

providing a permitted velocity range for said vehicle; 
when the restricted operator is determined to be operating 55 

said vehicle, determining the present velocity of said 

vehicle; 

when the present vehicle velocity is not within a permitted 
speed range, taking at least one action drawn from the 
class of said Control Actions. 

29. The method of claim 28, further comprising the step 60 
of modifying said permitted speed range for said vehicle. 

30. The method of claim 29, wherein said step of modi- 
fying said permitted speed range for said vehicle comprises 
transmitting a change signal from a monitoring station to 
said vehicle that modifies said permitted speed range. 65 

31. The method of claim 20, further comprising the steps 
of: 
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providing a permitted accumulated mileage range for 
operation of said vehicle within said permitted time 
interval; 

when said restricted operator is determined to be operat- 
ing said vehicle determining the present accumulated 
mileage range of said vehicle within said permitted 
time interval; 

when the present accumulated mileage range is not within 
the permitted accumulated mileage range, taking at 
least one action drawn from the class of said Control 
Actions. 

32. The method of claim 31, further comprising the step 
of modifying said permitted accumulated mileage range for 
said vehicle. 

33. The method of claim 32, wherein said step of modi- 
fying said permitted accumulated mileage range for said 
vehicle comprises transmitting a change signal to said 
vehicle that modifies said permitted accumulated mileage 
range. 

34. The method of claim 20, further comprising the steps 
of: 

providing a permitted accumulated vehicle operation time 
for said vehicle within said permitted time interval; 

determining the present accumulated vehicle operation 
time for said vehicle within said permitted time inter- 
val; 

when the present accumulated vehicle operation time is 
greater than the permitted accumulated vehicle opera- 
tion time, taking at least one action drawn from the 
class of said Control Actions. 

35. The method of claim 34, further comprising the step 
of modifying said permitted accumulated vehicle operation 
time for said vehicle. 

36. The method of claim 35, wherein said step of modi- 
fying said permitted accumulated vehicle operation time for 
said vehicle comprises transmitting a change signal to said 
vehicle that modifies said permitted accumulated vehicle 
operation time. 

37. The method of claim 20, further comprising the step 
of selecting said ident indicium from the class of biometric 
indicia consisting of a thumbprint, a fingerprint, a handprint, 
a hand silhouette, a partial facial scan, a full facial scan, a 
retinal scan, an iris scan, a voice sample analysis, a blood 
vein pattern scan and a blood sample analysis. 

38. The method of claim 20, further comprising the steps 
of: 

requiring a driver of said vehicle to present a token before 
the driver can operate said vehicle, where the token 
contains information that allows determination of at 
least one of a permitted time interval, a permitted travel 
region in which said vehicle can operate, and said 
selected biometric indicium; and 

reading the information contained on the token and deter- 
mining at least one of a permitted time interval, a 
permitted region in which said vehicle can operate, a 
permitted speed range within which said vehicle can 
operate, and said biometric indicium. 

39. The method of claim 20, further comprising the steps 
of: 

requiring a driver of said vehicle to enter personal infor- 
mation into a selected computer before the driver can 
operate said vehicle, where the personal information 
allows identification of the driver; and 

reading the personal information entered and determining 
at least one of a permitted time interval, a permitted 
region in which said vehicle can operate, and a per- 
mitted speed range within which said vehicle can 
operate. 

* * * * * 
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